Generate a recovery key after you update to two-factor authentication

If you use two-step verification and you sign in on a device running iOS 11 or macOS High Sierra, your Apple ID is automatically updated to two-factor authentication. After your account is updated, you have the option to generate a new recovery key.

This article has been archived and is no longer updated by Apple.

A recovery key isn't required with two-factor authentication, but using one gives you more control over the security of your Apple ID. When you generate a new recovery key, you turn off other account recovery methods. Then the only way to reset your password or regain access to your account is to use your recovery key.

Remember, if you lose your recovery key, you might be locked out of your Apple ID account permanently. That's why it's important to keep your recovery key in a safe place. You might want to give a copy of your recovery key to a family member, or keep copies in more than one place. That way you always have your recovery key when you need it.

You can generate a new recovery key from Settings or System Preferences.